Problems changing IDP certificates

[Byte Flinger]

Hi

We are trying to change the automatically generated certificates in
Shibboleth IDP 2.4.0 however we keep getting the following error in the
idp-process.log

14:18:08.898 - ERROR
[edu.internet2.middleware.shibboleth.common.config.BaseService:188] -
Configuration was not loaded for
shibboleth.RelyingPartyConfigurationManager service, error creating
components.  The
 root cause of this error was: java.io.IOException:
DerInputStream.getLength(): lengthTag=29, too big.

The certificate we are trying to use is created with SHA-256 and we have
performed some tests and noticed that when we created certificates with
SHA-1 it works.

Is there some sort of limitation on Shibboleth that one needs to know about
to use SHA-256 certificates?

We are currently using Oracle's JDK 1.7.0.4

Regards
ByteFlinger
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130912/d8c3b796/attachment.html